Privacy

Privacy policy

Effective November 13, 2026.

Merrimo is made by Tozer LLC, a company in the United States ("we", "us"). This policy covers the Merrimo apps for Mac, iPhone and iPad, the services they connect to, and this website. Merrimo is in beta, so we will update this page as the app changes.

The short version

  • Your stories are yours. We keep them so they can sync between your devices and the people you share them with, and for nothing else.
  • We don't sell your data, show ads, or use your stories to train AI models.
  • AI features run on a provider you choose, with your own account. Your text and pictures go straight from your device to that provider, not through us.
  • You can use Merrimo without an account, and then your stories stay on your device.
  • You can delete your account in the app at any time.

What we collect, and why

Your account

If you sign in, we keep your email address, your name and a profile picture if you add one. With Sign in with Apple we also keep the identifier Apple gives us for you (which may be a private relay email address). When you sign in with an emailed code, we keep a one-way hash of the code and the IP address it was requested from for up to a day, to stop abuse.

Your stories

When you are signed in, your stories sync to our servers: the text, story bible, pages and panels, comments, and settings you choose to sync. They are stored on servers run by Fly.io in the United States. If you use Merrimo without an account, your stories stay on your device and we never receive them.

Pictures and files

Pictures you add or create in a synced story are stored with Amazon Web Services in the United States, at long, unguessable addresses so your devices and collaborators can load them. Anyone who has one of these addresses can open the picture, so treat a copied link the way you would treat the picture itself.

Sharing and collaboration

When you share a story, the people you share it with see its content, your name and your email address, and the comments you leave. If you invite someone by email, we send them the invitation. Live presence, such as where a collaborator is working, is not stored. If you let someone use your Mac to render pictures, their requests and the results pass through our servers on their way between the two Macs and are not kept; we record only how much data was relayed.

AI providers

Merrimo's AI features use a service you connect yourself, such as Anthropic, OpenAI, Google or OpenRouter, or a model server you run. When you use one of these features, the part of your story it needs is sent from your device directly to that service, under your own account and that service's terms and privacy policy. Your API keys are kept in your Apple Keychain (and iCloud Keychain, if you use it) and are never sent to us. We do keep the list of services you have connected and usage numbers, such as which model was used and how many tokens it took, so the app can show you your usage. We never receive or keep the prompts or the responses.

AI agents you connect

If you let an AI assistant work on your stories through Merrimo's agent connection, we keep a working copy of your stories for that connection, a record of the changes it makes for 90 days, and the details of the connection. The working copy is deleted when you revoke the connection, or after 30 days without use.

Feedback you send

When you send feedback from the app, we receive what you write, any screenshots you attach, your device model, operating system and app version, and, if you are signed in, your email address so we can reply. The Mac version downloaded from this website also attaches a log of recent actions in the app, with long text shortened. We keep feedback in Notion, our issue tracker. Beta testers using TestFlight can also send feedback and crash reports through Apple, which shares them with us.

Purchases

If you buy Merrimo Pro, the payment is handled by Stripe or by Apple. We receive and keep a record of the purchase (what was bought, when, and whether it is active), never your card details.

Notifications and updates

If you allow notifications, we keep your device's push token and send notifications, such as a new comment with the commenter's name and a short excerpt, through Apple. The Mac app downloaded from this website checks our update server for new versions; that request includes the app version and your IP address.

Analytics

The Merrimo apps do not currently use analytics. This website counts page views with PostHog without cookies or any identifier that persists between visits.

Who else handles your data

We use these companies to run Merrimo, and they handle data only on our behalf: Fly.io (servers), Amazon Web Services (file storage), Resend (sign-in and invitation emails), Stripe (payments), Apple (Sign in with Apple, notifications, TestFlight, the App Store, and iCloud Mail for messages to our support address), Notion (feedback) and PostHog (website page views). The AI services you connect are your own providers, not ours. If you download an on-device model, it comes directly from the site that hosts it, such as Hugging Face.

We don't sell or rent personal information, and we don't share it for advertising. We would disclose it only if the law requires it.

Keeping and deleting your data

We keep your account and stories for as long as you have an account. To delete your account, open Merrimo's Settings › Account and choose Delete Account, or email us. Deleting your account immediately deletes your account, your sign-ins, the stories only you own, and your connected agents. Stories you share with others stay with their other owners. Your pictures and files are removed from storage within 30 days. Feedback you sent is kept so we can fix what you reported; email us to have it removed.

Your choices and rights

You can see and change your account details in the app, and use Merrimo without an account. Depending on where you live (for example in the EU, the UK or California) you have the right to access, correct, export or delete your personal information, and to object to how we use it. Email support@merrimo.com and we will reply within 30 days. You can also complain to your local data protection authority.

We process your information to provide the service you asked for, to keep it secure, and to answer you when you contact us. Your information is stored and processed in the United States.

Security

Everything travels over encrypted connections, sign-in codes are stored only as hashes, and your AI keys never leave your devices' keychain. No service is perfectly secure; if something goes wrong that affects you, we will tell you.

Children

Merrimo is not meant for children under 13 (or the minimum age in your country), and we don't knowingly collect their information. If you think a child has given us information, email us and we will delete it.

Changes

If we change this policy, we will update the date at the top, and for important changes we will tell you in the app or by email before they take effect.

Contact

Tozer LLC · support@merrimo.com